Google  App  Engine 
Adding  a Login  Screen 


ae-08-login 


Textbook:  Using  Google  App  Engine  (Chapter  6) 


open.michigan 


Unless  otherwise  noted,  the  content  of  this  course  material  is  licensed  under  a Creative 

Commons  Attribution  3.0  License. 

http://creativecommons.Org/licenses/by/3.0/. 

Copyright  2009,  Charles  Severance 


University  of  Michigan 


^ University  of  Michigan  School  of 

Information 


Adding  a Login  Screen 


One  of  the  benefits  of  using 
a “Base”  template  and 
extending  it  is  the  ability  to 
easily  add  new  screens 

We  will  quickly  add  a login 
screen  to  our  application 


App  Engine 

[ ■<  | ► j 0http://localhost:8O8O/login  ©-Q,-  Google  » 

App  Engine  Sites  Topics  Login 

Please  Log  In 

Please  enter  your  id  and  password  to  log  in  to  this  site. 

Account:  - 
Password:  ~ 

Submit  ) ( Cancel 


Steps 

• Make  a bit  of  utility  code  to  do  the  render  steps 

• Determine  a URL  for  the  login  screen 

• GET  will  display  the  screen 

• POST  will  check  the  password  and  optionally  log  you  in 

• Add  a LoginHandler  and  add  a route  for  /login  to  that  handler 

• Build  the  template  for  loginscreen.htm 

• Build  the  Python  code  for  LoginHandler 


def  doRender (handler , tname= 1 index . htm 1 , values={ } ) 
temp  = os .path. join ( 

os  . path . dirname  ( file ) , 

’templates/1  + tname) 
if  not  os .path. isfile (temp) : 
return  False 

# Make  a copy  and  add  the  path 
newval  = diet (values) 

newval [ 1 path 1 ] = handler . request . path 

outstr  = template . render (temp , newval) 
handler . response . out . write (outstr) 
return  True 


/login  will  be  our  path  for  the  login  screen 
GET  = display  the  screen 


POST  = check  the  password 


class  LoginHandler (webapp . RequestHandler ) : 


def  get (self) : 

doRender (self , 'loginscreen.htm' ) 


def  main()  : 

application  = webapp . WSGIApplication ( [ 

( 1 /login' f LoginHandler) , 

('/.*' , MainHandler) ] , 
debug=True) 

wsgiref . handlers . CGIHandler ( ) . run (application) 

if  name ==  1 main ' : 

main ( ) 


Modify  _base.htm 


Add  two  new  template  files 
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<liXa  href=" sites  .htm" 

{%  if equal  path  '/sites. htm' 
class=" selected" 

{%  endif equal  %} 
>Sites</aX/li> 

<liXa  href=" topics  .htm" 

{%  if equal  path  ' /topics .htm1 
class=" selected" 

{%  endif equal  %} 
>Topics</aX/li> 

<liXa  href  =" /login" 

{%  if equal  path  '/login'  %} 
class=" selected" 

{%  endif equal  %} 
>Login</aX/li> 


</ ul> 
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extends  "_base . htm"  % } 
block  bodycontent  %} 

<h2>Please  Log  In</h2> 

<P> 

Please  enter  your  id  and  password  to  log  in  to  this  site. 
</p> 

<form  method="post"  action="/login"> 

Account:  <input  type="text"  name=" account" />  <br> 
Password:  <input  type= "pas sword"  name= "pass word" />  <br/> 
<input  type=" submit"  value= " Login "/> 

<input  type=" submit"  value=" Cancel" 

onclick=" window. location=' / ’ ; return  false; "/> 
</form> 

</p> 

{%  endblock  %} 


loginscreen.htm 


Handling  the  POST 


The  incoming  fields  come  as  “account”  and  “password’ 

We  check  for  empty  fields,  or  bad  password,  and  if  the 
users  knows  the  right  password,  we  give  them  a nice 
message. 
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Please  Log  In 

Please  enter  your  id  and  password  to  log  in  to  this  site. 

Account:  sally 

1 ! 

Password:  

1 

( Login  ) (Cancel  ) 
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Login  successful. 

def  post (self): 

acct  = self .request. get ( ’account' ) 

pw  = self .request. get ( 'password1 ) 

logging . info ( ' Checking  account= ' +acct+ ' pw= ' +pw) 

if  pw  ==  ' ' or  acct  ==  ' ' : 
doRender ( 
self, 

'loginscreen.htm' , 

{'error'  : 'Specify  Acct  and  PW' } ) 

elif  pw  ==  'secret' : 

doRender (self , 'loggedin.htm' , { } ) 
else : 

doRender ( 
self, 

'loginscreen.htm' , 

{'error'  : 'Incorrect  password'}  ) 
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extends  "_base . htm"  % } 
block  bodycontent  %} 

<h2>Please  Log  In</h2> 

<P> 

Please  enter  your  id  and  password  to  log  in  to  this  site. 
</p> 

<P> 

<form  method="post"  action=" /login "> 

Account:  <input  type="text"  name=" account" />  <br> 
Password:  <input  type=npassword"  name= "pas sword" />  <br/> 
<input  type=" submit"  value=" Login "/> 

<input  type=" submit"  value=" Cancel" 

onclick= "window . location= ’ / ' ; return  false ; " /> 
</form> 

</p> 

{%  ifnotequal  error  None  %} 

<P> 

{ { error  } } 

</p> 

{%  endifnotequal  %} 

{%  endblock  %} 
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extends  "_base . htm"  % } 
block  bodycontent  %} 

<P> 

Login  successful . 
</p> 

{%  endblock  %} 
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Login  successful. 


loggedin.htm 


